Updating cosign version to fix signatures fetching

PR sigstore/cosign#287 changed the signature extension from .cosign to .sig. As we are using Cosign:v0.2.0, the manager was not able anymore to fetch signatures signed with latest version of Cosign. Fixes: dlorenc#3 Signed-off-by: Youssef Azrak <[email protected]>
youssefazrak · May 19, 2021 · 1ac6ee2 · 1ac6ee2
1 parent f72a553
commit 1ac6ee2
Show file tree

Hide file tree

Showing 2 changed files with 427 additions and 2 deletions.
diff --git a/go.mod b/go.mod
@@ -3,8 +3,8 @@ module github.com/dlorenc/cosigned
 go 1.16
 
 require (
-	github.com/google/go-containerregistry v0.4.1-0.20210206001656-4d068fbcb51f
-	github.com/sigstore/cosign v0.2.0
+	github.com/google/go-containerregistry v0.5.0
+	github.com/sigstore/cosign v0.4.0
 	k8s.io/api v0.20.2
 	k8s.io/apimachinery v0.20.2
 	k8s.io/client-go v0.20.2